Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File:                     8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier:          7PgrwnE4+rWWZ0qAvemuk4ik9Lq6wyQjb7nSpNZtRpQ=
Subject key identifier:   36:8B:6E:93:94:A4:C5:99:16:FD:9B:4E:90:BD:39:0B:0F:B6:12:D1
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer:       /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial:       019F1453C2898E85119282383A3DC7190FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number:          0690
Signing time:             Mon 29 Jun 2026 17:01:01 +0000
Manifest this update:     Mon 29 Jun 2026 17:01:01 +0000
Manifest next update:     Tue 30 Jun 2026 17:01:01 +0000
Files and hashes:         1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: Gf1iH5XS/qtLGGB0M2StD0USnJ0QKd+r+SP7klq+sU4=)
                          2: B1xsgML2xDaRQYkGxUtabnWxmGY.roa (hash: +xPFhEuCza9EAaqJyGgj1UH0V5vl/QcBkrNeZ95rHj4=)
                          3: WOH-dDFILdAlNDw8JowUyaFPvJw.roa (hash: OCSDelJnuET1EEoYclmA8O4BqfKPKxqqfnyLODL87wk=)
                          4: X4JSAl7mEoJyzznkY14VbNv09k8.roa (hash: j50w3dwHk0KiPncH2Bx9DQIkaE9cvvACV1hP4QRJhbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:53:c2:89:8e:85:11:92:82:38:3a:3d:c7:19:0f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
        Validity
            Not Before: Jun 29 17:01:01 2026 GMT
            Not After : Jun 30 17:01:01 2026 GMT
        Subject: CN=368b6e9394a4c59916fd9b4e90bd390b0fb612d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:d9:90:5b:06:54:6e:92:46:06:0d:b5:37:
                    58:fd:b4:d8:f2:2d:d5:17:8b:3b:28:6a:2e:50:6f:
                    1d:e0:73:23:32:90:15:a7:aa:6d:68:88:6d:9c:59:
                    0f:6f:ee:b1:29:d7:00:02:94:0a:ec:7b:60:c7:18:
                    ec:07:a2:4e:00:a3:eb:c7:fd:9f:18:42:24:2a:36:
                    28:1d:51:2a:ca:2c:0a:d6:d5:33:d0:28:e2:c1:c2:
                    dc:6a:48:61:b3:89:65:13:36:d1:a8:ed:7a:51:f1:
                    6b:4d:16:47:b5:52:51:90:d3:99:9b:5c:3e:7f:e8:
                    ca:b1:98:29:1d:9f:2a:4e:8d:3c:f0:a0:7d:3f:1e:
                    fa:b5:50:4e:87:7c:fc:05:32:49:87:da:e1:64:e6:
                    f2:56:6f:97:d0:04:78:8c:7e:ea:22:e9:b0:bb:88:
                    3b:fa:de:05:23:4b:8d:c7:7a:cc:87:0d:9a:f3:e8:
                    d4:fa:2a:6b:bf:c0:04:86:33:6a:26:58:34:f0:8c:
                    0f:07:7f:75:dd:6e:f7:ca:ae:6f:6c:ee:ac:35:4d:
                    52:07:5c:db:a2:9f:da:e2:75:ce:49:2b:c9:45:5e:
                    6f:b4:f1:d8:97:57:cb:5d:9c:df:aa:28:8e:47:ac:
                    96:41:d3:db:bd:f8:2a:49:b7:bb:28:5d:27:7d:4d:
                    cc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8B:6E:93:94:A4:C5:99:16:FD:9B:4E:90:BD:39:0B:0F:B6:12:D1
            X509v3 Authority Key Identifier:
                keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:ba:82:42:97:8b:29:ee:52:8c:c6:a9:2b:96:5d:30:89:
         04:0e:bf:89:50:cd:78:6c:ec:25:5b:5a:ab:28:2e:fa:04:c8:
         e4:b3:8d:18:75:60:1e:b6:36:1b:07:4d:fd:77:e0:e1:3e:fa:
         75:08:46:82:44:ac:5b:a7:94:89:57:8f:45:3c:a3:98:4f:e4:
         01:74:c4:77:33:ce:b2:45:5c:62:c9:53:d2:a5:9f:36:af:48:
         5a:8e:50:31:48:1f:46:53:c4:19:89:75:b1:02:47:a4:c1:1f:
         8c:88:8e:01:ba:05:23:07:16:31:e5:d3:64:d3:af:b6:53:7f:
         c5:0c:94:81:e1:ce:1c:20:f2:2b:57:8a:bc:30:cd:2b:6b:96:
         f0:80:94:50:4d:d9:77:95:30:78:98:aa:fc:77:7f:cc:eb:6a:
         1d:8c:63:d7:41:a4:06:59:24:00:ae:cd:bb:16:38:a0:e5:c5:
         b9:52:f8:5c:da:1e:69:f5:2e:ce:b0:0b:9e:80:b4:46:b4:a6:
         eb:a2:71:c9:00:3f:a9:73:31:ef:07:9b:ef:ca:15:74:87:26:
         d4:8f:c6:2c:75:31:ca:94:24:88:01:e9:f6:16:1c:ed:87:b2:
         eb:9d:65:a1:a1:d6:3d:cb:a3:73:39:97:d6:83:dd:28:0e:3c:
         c7:fc:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:32:43 2026 by rpki-client